66RESJbT2185402[.]zip

General

Target
66RESJbT2185402.zip
Size 1.9MB
Sample260727-ryrynsbe84
SHA256 5155a38d9f9002f03e83982d155da71a16fac28d41a02d751935e5df3a580c65
MD5 0779acba79cdcce3d62857b97c98d296
SHA1 4666654fb37fc7a235a57233b49b05e49cc24a80
SHA512 190a5df28a08b064f458ec0c6db2cc53c4dd982e519410b10b0fa2e33b497771ab35a1691a4ae8b949e358e88fe92947f2368e30a0a26e36faf3a6a338a42d47
SSDEEP 49152:m5XsyRSQ7KXYA9FT0qNPNlLMRm4JgMm+IG5xovLOPCxaUUcu:m5hRSrLh5lLMRjgMm7+xovLOaAku
TLSH
T15B9533B57847B957BA63F8350EE9C9C411C44AADC33A6AC3BC259D7E5FBD1482420CA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/SPECIFICATIONS.exe

File Explorer

66RESJbT2185402.zip

.zip 1.9MB
66RESJbT2185402.eml

1.3MB
SPECIFICATIONS.Tar

.rar 975KB
SPECIFICATIONS.exe

.exe 1.4MB

66RESJbT2185402.zip

SHA256 5155a38d9f9002f03e83982d155da71a16fac28d41a02d751935e5df3a580c65
MD5 0779acba79cdcce3d62857b97c98d296
SHA1 4666654fb37fc7a235a57233b49b05e49cc24a80
SHA512 190a5df28a08b064f458ec0c6db2cc53c4dd982e519410b10b0fa2e33b497771ab35a1691a4ae8b949e358e88fe92947f2368e30a0a26e36faf3a6a338a42d47
SSDEEP 49152:m5XsyRSQ7KXYA9FT0qNPNlLMRm4JgMm+IG5xovLOPCxaUUcu:m5hRSrLh5lLMRjgMm7+xovLOaAku
TLSH
T15B9533B57847B957BA63F8350EE9C9C411C44AADC33A6AC3BC259D7E5FBD1482420CA3
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

SPECIFICATIONS.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a511d02211003769575ee9e8a44888c5e11263400a8188033f9892da1b6b6a0a
MD5 c086246a14362e356f3413615b778079
SHA1 7d77f2a106b3229587143cc962eaa2f36b288f43
SHA512 cf6c2436bc74dd5934fcbc414fdaf0a423f7c33c68bacaac3842eeded0dcfefc7013dba3256471ddfca4eacc5b03bcd5c3c3c02b4005cc388fd9a08ab5384e15
SSDEEP 24576:3oULR4THPSnhaN7LUNaQWfDlFFcMi7SxjTPgZzVj5CMqLF7PjE14Xkv:3oULRiH6gyopfDNcMi7cPyj5CPRjE14U
TLSH
T1EE65D02B2D13A536D7716EBF0C60E0B517686C56A5E4E1063EDEFDAB7C3AE013904352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1080194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

66RESJbT2185402.zip

66RESJbT2185402.eml

SPECIFICATIONS.Tar

SPECIFICATIONS.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

66RESJbT2185402.zip

66RESJbT2185402.eml

SPECIFICATIONS.Tar

SPECIFICATIONS.exe

mscoree

dotnet